Author Topic: My website is detected by Avast as a malware website :S  (Read 6533 times)

0 Members and 1 Guest are viewing this topic.

bienpiyao

  • Guest
My website is detected by Avast as a malware website :S
« on: December 10, 2011, 10:45:52 AM »
Hi there,

Since yesterday, Avast is blocking my website (wxx.liga10.es) saying that is a VBS: Malware-Gen. I'm getting several complains from my users because of that.



I've been running a security scanner with Sucuri SiteCheck and everything is fine...Could you please fix this?



Thanks a lot,
Bienpi.
« Last Edit: December 10, 2011, 10:48:25 AM by bienpiyao »



Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: My website is detected by Avast as a malware website :S
« Reply #3 on: December 10, 2011, 11:15:21 AM »
There was a FP yesterday (fixed now) related to histats, do you use it...??.

Report    2011-12-10 10:04:05 (GMT 1)
Website    liga10.es
Domain Hash    c9f28a84bb2dc1658b366b035cd869d9
IP Address    217.160.232.250 [SCAN]
IP Hostname    clienteservidor.es
IP Country    DE (Germany)
AS Number    8560
AS Name    ONEANDONE-AS 1&1 Internet AG
Detections    0 / 23 (0 %)
Status    CLEAN

Report    2011-12-10 11:04:55 (GMT 1)
IP Address    217.160.232.250
IP Hostname    clienteservidor.es
IP Country    DE
AS Number    N/A
AS Name    N/A
Detections    0 / 26 (0 %)
Status    CLEAN
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

bienpiyao

  • Guest
Re: My website is detected by Avast as a malware website :S
« Reply #4 on: December 10, 2011, 11:20:43 AM »
There was a FP yesterday (fixed now) related to histats, do you use it...??.

Report    2011-12-10 10:04:05 (GMT 1)
Website    liga10.es
Domain Hash    c9f28a84bb2dc1658b366b035cd869d9
IP Address    217.160.232.250 [SCAN]
IP Hostname    clienteservidor.es
IP Country    DE (Germany)
AS Number    8560
AS Name    ONEANDONE-AS 1&1 Internet AG
Detections    0 / 23 (0 %)
Status    CLEAN

Report    2011-12-10 11:04:55 (GMT 1)
IP Address    217.160.232.250
IP Hostname    clienteservidor.es
IP Country    DE
AS Number    N/A
AS Name    N/A
Detections    0 / 26 (0 %)
Status    CLEAN

Cool! Thank you very much! I'm sorry, but I don't have avast in my laptop and I got the first screenshot from one of my users, that's why I couldn't recheck. Sorry about that.

I will let them know that should be fixed by now :).

Thanks a lot.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: My website is detected by Avast as a malware website :S
« Reply #5 on: December 10, 2011, 11:21:58 AM »
That is the 1000$ question... it is a reputation scan, but it does not say who and why

URLVoid.com comes up clean and so does Unmaskparasites.com and virustotal.com

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: My website is detected by Avast as a malware website :S
« Reply #6 on: December 10, 2011, 11:24:14 AM »
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

24ores

  • Guest
Re: My website is detected by Avast as a malware website :S
« Reply #7 on: December 10, 2011, 03:05:50 PM »
Ι had the same exactly problem with my blog http://24newslines.blogspot.com and i removed all the gadgets i had,also i changed the code of my blog,actually all day i was in panic trying to find what is going on.I have to say that i use histats statistics,but i think the problem solved now.
If you think that my post should be moved in a new thread please move it.
It is my first visit here. :)

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: My website is detected by Avast as a malware website :S
« Reply #8 on: December 10, 2011, 03:44:24 PM »
It is my first visit here. :)

Welcome to the forum..! :)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: My website is detected by Avast as a malware website :S
« Reply #9 on: December 10, 2011, 07:27:27 PM »
Norman lab say clean
Quote
-http://www.liga10.es
The given webiste doesnt have any malicious code in it .

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: My website is detected by Avast as a malware website :S
« Reply #10 on: December 10, 2011, 07:29:41 PM »
Norman lab say clean
Quote
-http://www.liga10.es
The given webiste doesnt have any malicious code in it .

Hi Pondus, it's already solved. It was a FP.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: My website is detected by Avast as a malware website :S
« Reply #11 on: December 10, 2011, 07:44:49 PM »
Norman lab say clean
Quote
-http://www.liga10.es
The given webiste doesnt have any malicious code in it .

Hi Pondus, it's already solved. It was a FP.
Since i uploadet it for a check...i also post the result  ;)
« Last Edit: December 10, 2011, 07:46:33 PM by Pondus »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: My website is detected by Avast as a malware website :S
« Reply #12 on: December 10, 2011, 07:54:30 PM »
Since i uploadet it for a check...i also post the result  ;)

Ok, no problem with that. :)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33900
  • malware fighter
Re: My website is detected by Avast as a malware website :S
« Reply #13 on: December 10, 2011, 09:16:28 PM »
Here is what I got from a bad iFrame detektor scan:

No zeroiframes detected!
Check took 2.48 seconds

(Level: 0) Url checked:
-http://www.liga10.es
Google code detected (Ads, not a cheater)
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (iframe source)
-http://ads.betfair.com/ad.aspx?bid=4854&pid=70574
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 2) Url checked: (script source)

Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
-http://www.liga10.es/ejemploajax.js
Blank page / could not connect
No ad codes identified

(Level: 1) Url checked: (script source)
-http://www.liga10.es/livevalidation_standalone.js
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
-http://www.liga10.es/https://apis.google.com/js/plusone.js
Blank page / could not connect
No ad codes identified

(Level: 1) Url checked: (script source)
-http://s10.histats.com/js15.js
Blank page / could not connect
No ad codes identified

(Level: 1) Url checked: (script source)

Blank page / could not connect
No ad codes identified

(Level: 1) Url checked: (script source)
-http://connect.facebook.net/es_es/all.js#xfbml=1
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)

Blank page / could not connect
No ad codes identified

(Level: 1) Url checked: (script source)
-http://platform.twitter.com/widgets.js
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
-http://static.ak.fbcdn.net/connect.php/js/fb.share
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)

Blank page / could not connect
No ad codes identified

(Level: 1) Url checked: (script source)
-http://connect.facebook.net/es_es/all.js#xfbml=1
Zeroiframes detected on this site: 0
No ad codes identified

(Level: 1) Url checked: (script source)
-http://s10.histats.com/js15.js
Blank page / could not connect
No ad codes identified

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!